opendevreview | Takashi Kajinami proposed openstack/neutron master: Set minumum boundary for workers https://review.opendev.org/c/openstack/neutron/+/908180 | 05:54 |
---|---|---|
opendevreview | Merged openstack/neutron-tempest-plugin master: Replace usage of deprecated path for test decorators https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/908549 | 06:06 |
opendevreview | Takashi Kajinami proposed openstack/neutron master: Completely disable rpc workers when rpc_workers=0 https://review.opendev.org/c/openstack/neutron/+/908173 | 06:28 |
opendevreview | Takashi Kajinami proposed openstack/neutron master: Set minumum boundary for workers https://review.opendev.org/c/openstack/neutron/+/908180 | 06:28 |
*** ralonsoh_ is now known as ralonsoh | 08:08 | |
ralonsoh | slaweq, bcafarel hello! Can you check https://review.opendev.org/c/openstack/neutron/+/908571 and https://review.opendev.org/c/openstack/neutron/+/908586? | 08:09 |
ralonsoh | Thanks in advance! | 08:09 |
ralonsoh | btw, 2023.1 and zed have issues with the CI (grenade jobs). I've already reported that | 08:09 |
opendevreview | Rodolfo Alonso proposed openstack/neutron master: [OVN] A LRP in an external tunnelled network has no chassis https://review.opendev.org/c/openstack/neutron/+/908325 | 08:16 |
slaweq | <ralonsoh> "slaweq, bcafarel hello! Can..." <- done | 08:25 |
ralonsoh | thanks! | 08:25 |
bbezak | good morning | 09:33 |
bbezak | I'm looking into applying secure rbac (service role) to the ironic user in kolla ansible master upstream | 09:34 |
bbezak | however it looks like some of neutron's policies are admin only | 09:34 |
bbezak | 2024-02-09 18:42:21.782 7 ERROR ironic.conductor.manager ironic.common.exception.NetworkError: Unable to clear binding profile for neutron port a1f09f87-16cc-4046-bbcd-a8e290a881a1. Error: ForbiddenException: 403: Client Error for url: http://192.0.2.10:9696/v2.0/ports/a1f09f87-16cc-4046-bbcd-a8e290a881a1, ((rule:update_port and | 09:34 |
bbezak | rule:update_port:binding:host_id) and rule:update_port:binding:profile) is disallowed by policy | 09:34 |
bbezak | namely those two for bindings | 09:34 |
bbezak | so service role is not enough for those | 09:34 |
bbezak | therefore ironic service user needs an admin anyway :) | 09:36 |
bbezak | I've seen that neutron has service role support already since 2023.2 | 09:36 |
bbezak | I'm wondering if those binding profiles should be also available for service role? | 09:37 |
bbezak | for ironic/neutron service communication | 09:38 |
opendevreview | Vasyl Saienko proposed openstack/neutron master: Drop hardcoded dhcp agent type https://review.opendev.org/c/openstack/neutron/+/908764 | 10:15 |
opendevreview | Merged openstack/neutron master: Change SG rules backref load method to "joined" https://review.opendev.org/c/openstack/neutron/+/908571 | 10:33 |
sahid | o/ | 10:39 |
sahid | ralonsoh: I think i found the issue that we have with dhcp agent but i may not consider some cases | 10:40 |
sahid | https://github.com/openstack/neutron/blob/master/neutron/scheduler/dhcp_agent_scheduler.py#L82 | 10:40 |
sahid | it seems that, when is_routed_network is True | 10:41 |
sahid | we validate the fact that all segments for netowkrs are schedule on host | 10:42 |
sahid | if it's not the case we do not check whether len(agents) >= agents_per_network | 10:43 |
ralonsoh | bbezak, please check that with slaweq, we'll know better because we was implementing that. The port binding operation is requested by Nova, so most probably there is a S2S user for that | 10:44 |
sahid | because i guess we want to schedule that network for this agent in all cases | 10:44 |
ralonsoh | sahid, let me check | 10:44 |
sahid | but i imagine that some pieces are missing for me, because in our cases we actually want to check that condition | 10:45 |
sahid | and naively I would have removed the "else" line 82 | 10:46 |
sahid | ralonsoh: sure thank you | 10:46 |
ralonsoh_ | sahid, I need to check that locally, did you open a LP bug? | 10:49 |
sahid | ralonsoh_: no yet i wanted to see whether the issue we related to something badly configured in our env, but I will open one with some details | 10:51 |
bbezak | thx ralonsoh. I'll rebase my change on service role addition to nova in kolla-ansible (as it is in the works too), and try it again :) | 10:53 |
opendevreview | Vlad Gusev proposed openstack/neutron stable/zed: fix netns deletion of broken namespaces https://review.opendev.org/c/openstack/neutron/+/908695 | 11:10 |
opendevreview | Vlad Gusev proposed openstack/neutron stable/zed: Remove duplicate rows in MySQL query output https://review.opendev.org/c/openstack/neutron/+/908696 | 11:11 |
slaweq | bbezak hi, according to the api-ref description of the "binding:profile" https://docs.openstack.org/api-ref/network/v2/index.html#ports it is meant for machine-machine communication so yes, it should be for service role, not admin even. Please open LP bug for that and send me link to it, or even send patch if You want and have cycles for that :) | 11:45 |
slaweq | and thx for pointing that out. I had to miss it somehow when I was doing those service role in Neutron APIs | 11:45 |
bbezak | cool, thx will do shortly | 11:48 |
bbezak | LP at minimum | 11:49 |
bbezak | have plenty on my plate now, but let's see if I'll find time for policy update | 11:49 |
bbezak | slaweq: https://bugs.launchpad.net/neutron/+bug/2052937. I'll try to test fixed policies in kolla-ansible CI | 12:18 |
opendevreview | Merged openstack/neutron master: Update hacking version https://review.opendev.org/c/openstack/neutron/+/907020 | 13:09 |
opendevreview | Merged openstack/neutron master: Log warning about port forwardings that won't work properly https://review.opendev.org/c/openstack/neutron/+/907402 | 13:09 |
opendevreview | Merged openstack/neutron master: [Docs] Add info about incompatible PF configuration in ML2/OVN gaps https://review.opendev.org/c/openstack/neutron/+/907403 | 13:10 |
opendevreview | Merged openstack/neutron stable/2023.2: Change SG rules backref load method to "joined" https://review.opendev.org/c/openstack/neutron/+/908586 | 13:10 |
opendevreview | Lajos Katona proposed openstack/networking-bgpvpn master: Bump hacking https://review.opendev.org/c/openstack/networking-bgpvpn/+/907177 | 13:29 |
opendevreview | Lajos Katona proposed openstack/neutron stable/2023.1: Unmaintained-Only: change stable/yoga to unmaintained https://review.opendev.org/c/openstack/neutron/+/908790 | 14:08 |
opendevreview | Takashi Kajinami proposed openstack/neutron master: Fix wrong option name in release note https://review.opendev.org/c/openstack/neutron/+/908791 | 14:10 |
opendevreview | Takashi Kajinami proposed openstack/neutron master: Fix a typo in parameter description https://review.opendev.org/c/openstack/neutron/+/908792 | 14:18 |
opendevreview | Slawek Kaplonski proposed openstack/neutron stable/2023.2: [OVN] Warn about invalid OVN and FIP PF config during start of Neutron https://review.opendev.org/c/openstack/neutron/+/908798 | 14:53 |
opendevreview | Slawek Kaplonski proposed openstack/neutron stable/2023.2: Log warning about port forwardings that won't work properly https://review.opendev.org/c/openstack/neutron/+/908799 | 14:53 |
opendevreview | Slawek Kaplonski proposed openstack/neutron stable/2023.2: [Docs] Add info about incompatible PF configuration in ML2/OVN gaps https://review.opendev.org/c/openstack/neutron/+/908800 | 14:53 |
opendevreview | Slawek Kaplonski proposed openstack/neutron stable/2023.1: [OVN] Warn about invalid OVN and FIP PF config during start of Neutron https://review.opendev.org/c/openstack/neutron/+/908822 | 14:58 |
opendevreview | Slawek Kaplonski proposed openstack/neutron stable/2023.1: Log warning about port forwardings that won't work properly https://review.opendev.org/c/openstack/neutron/+/908823 | 14:58 |
opendevreview | Slawek Kaplonski proposed openstack/neutron stable/2023.1: [Docs] Add info about incompatible PF configuration in ML2/OVN gaps https://review.opendev.org/c/openstack/neutron/+/908824 | 14:58 |
*** jph3 is now known as jph | 15:06 | |
slaweq | bbezak thx, I will try to propose patch later this week | 15:49 |
opendevreview | Merged openstack/tap-as-a-service master: reno: Update master for unmaintained/yoga https://review.opendev.org/c/openstack/tap-as-a-service/+/907876 | 16:23 |
opendevreview | Christian Rohmann proposed openstack/neutron-vpnaas master: Improve the reconciling for VPNaaS https://review.opendev.org/c/openstack/neutron-vpnaas/+/875745 | 16:48 |
ralonsoh | haleyb, hello! if you have 5 mins: https://review.opendev.org/c/openstack/neutron-lib/+/903531 | 17:43 |
ralonsoh | thanks! | 17:43 |
opendevreview | Brian Haley proposed openstack/neutron master: Change OVN client to account for nested networks https://review.opendev.org/c/openstack/neutron/+/907504 | 18:57 |
opendevreview | Merged openstack/neutron master: Fix a typo in parameter description https://review.opendev.org/c/openstack/neutron/+/908792 | 19:25 |
opendevreview | Merged openstack/neutron stable/2023.1: Unmaintained-Only: change stable/yoga to unmaintained https://review.opendev.org/c/openstack/neutron/+/908790 | 19:26 |
opendevreview | Merged openstack/neutron master: Completely disable rpc workers when rpc_workers=0 https://review.opendev.org/c/openstack/neutron/+/908173 | 21:03 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!